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Abstract of JP2001 34581 9 

PROBLEM TO BE SOLVED: To provide an 
access point device and a method of 
authentication processing therefor, with which a 
security level can be remarlcably improved, in a 
wireless LAN system. SOLUTION: An access 
point device 18 is provided with an authentication 
request display means 16 for making the access 
point device 18 report the existence of a mobile 
station requesting authentication for obtaining the 
final permission of an authentication procedure 
inside an area, to a network manager for 
managing a LAN, when the mobile station inside 
the area is to perform the authentication 
procedure, before the start of an association 
procedure and an authentication input means 1 5 
for the network manager, who receives the 
notice, to instruct the permission of refusal of 
authentication to the mobile station requesting 
authentication. 
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jtria^y Trt<^#i!i^-6^ ryv^^^^-v'g v#NISrMi6 
-r-5Sfr»cSSE¥JfiS:tT*3 9i:-t-5«^l-. S^IELANSr 

B«rfE^»^l^iSf§i-5Bfr(c, ffFlHLANSrWS-rS^s/ 
«ra*Pi-5 i: t tc, ail*!8liE:6S^Ti^4^5^•T?roS:*c# 

[if*^3 ] HMIEII3 stiiE^ y h !7- 



2 

[ti*3S 5 ] ItrlE^iiE^i^fi. IEEE802. 11 
5 Shared Key Authentication#|lRT?i5?i r t 
S:imfti:-r5i«*«2 75S4©l ^-f Hd^tcfattro T ^ -fe 

10 [000 1] 

fflb^c, y^r-VU^^LAN-^^T^AJcisV^-C, SicSri^ 
o fcg A#G3^tii^ b tO^iEJi T ^ -fe ^ S: E^lhi" 5 

[0 0 0 2] 

#V\ :;i-7-f;^, ^S^t?, LAN (Local Area Netwo 

20 rk) S^1S^i-5•^^-xi5iixTtT^^5, t^v'^S'/vMH 

*ii6-eLANSr1S^1-.5. V>t?i^>5.!7-rirU-;^LA 

ISc<o#^t■&lgc;^5^#$i^Tl/^5o CKoy-f-ir L';^ L AN 

(Of^WiS^Si: LTI±. gE^J:^ IEEE (Institute 

of Electrical andElectronics Engineers) liltSV^T, 
^Jp-fk^HTV^S, IEEE8 0 2. llil^h^. z.<r> 

30 mm\t^i^\>ii.&m\±. o s i^x/wc^Nts. i>sommt^ 

'f—f])>i^<OTiiBlS'^i>^MAC (Media Acce 
ss Control : mWT^±^Mm -CSrS^t bT*3 
9. *ill©LANeillK-efc5, !^-^s/ hi:{S# 

JP«IBtLT, n-^i^;/ (roaming) «6IBt««^t?# 

loo 0 31 ^jHW-r-f— ^5/ K^-e. LAN 

Sr«l6-r5«^. LAN»w^«g-i-5ri:tt, 

;i-7^^^tc::^IE»ceAL. ffi*^$r4^ s/ H7-i5' 

f£LAN(Dn&m^U ]t^6<)4>/m«roLAN) 
mm^t. ^©LANS:«^5^^7'-^/V-^-^*^ 

so — v'g:^ (Association) J; (5 a#lfe*35. M 
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IS. gE#0 I EEE 8 0 2. 1 l^©v';^-rAlC*5V'' 

'I'XN (access point) fS^Pfi^i y TtCl^S 

[0 0 0 4] :iroTyv'3i— >3:/#{i»c:j:tvtf, stFlE 

•^—'^t^\Z^ S S I D (Service Set Indentifier) Sr 

31— 3 ^-ff Bl/v— /Hc?Sv\ -t-^JT y > 3 i/'S: 
fF^-r5*»if 5d^Sr»:)&b, l^^-t-5»^tt. ryv-ai 

t^. ros S I D$^A#bTL*x(i, ffi^lCTy'> 
y>'3i-v'3i^#lli=SrllfT-r5fc«>lw, SaE#l^#«:tT 

31— :^ 3 ^ US ^/iaiiSrStt-f- 5 t 5 , 

[0005] IEEE80 2. 1 1 tC*5l/^Tf±. r.<OS 

SE#i^#fiv Shared Key Authentication#WMi LTJg 
^$ixT*5«9, r ©#115:111 5 SU^HI etc if) IftB^i- 
5, lastt, tS5t€(D!7>i'-lr^;^LANv-:^xA©«tBSfl| 
figSr^i-ia. 1216 tt, i{e3l5©SIE#l|IiTy->3i-v'3 

[0 0 0 6 1 E15 »c4oV^-c, 1 tty-r-^w-;^ • aiy r • 

MTl. 4fiSib^MT2. 5fi^Sb^MT3» 6fi?^ 

[0 0 0 7] hz>^m^^'&\zi.y)n-^-^ini>. te^s/ 
hy-^'7tcgEigc$ixft.Ti'-fe;^4?'i'>'hAP2i:, -t 

»C#:^E-r5, Sit^MTl. MT2, MT3. MT4/4* 
i/^-C. fcS^i!)^ (0iJx.ff, MTl) maiSrKAi- 



UT. Ty->3i— >3 :xfr®sSE¥!K^2r-t--5*i^Oi^ 

[00 0 8] *-f . ^ffil^MT 1 fi. Shared Key Authe 
ntication:^ifetCj;5|gBE#i^tSrM*&1-5fcfeW. ^ 

SES*^ y-fe-v^liSr. T^-fe;^7K-f i^hAP2lciMft 

•t5. APSgsEtoas (APSSEtea rij ) irux. 

:i<Op< jz-fe-v'SrSffibfcAP 2fl, :i£OSIiE#i^^ro 
SIC. ■ttStC^fe^r i;;65tf#5. Initialization Vec 
10 tortSecret Key(0^tSr. ^iL. WE P (Wir 

ed Equivalent Privacy) P R N G (Pseudorandom Numb 
er Generator) (OT/W^ y XAtCt^l Nfgc^t^S^^Srff V\ 
1280c te tcD. — jttcSt* ^Challenge Text©'(it 

[0 0 0 9] MTigfEJaas (AP^nias 

r2j ) i:LT. *SiiE;&^p< s'-fe-i^l SrSmbfc^ 
a^MT 1 fl, ^rO'tJ-^^ixSWIEChallenge Text©|S 
5r. WEP©Bf-§-ffc:r>'l'=fy XAtCSev\ shared Secre 
20 t Datatv Initialization VectorSr/''''^ ;^ — (C. Bf 
■§-'(t:Srffl/\ -tro^aSr, HulBInitialization Vectori 
*|C. SIES*> s'-fe-v?2to:-&«)T. ItflBT^-t^^sK 
'Ti'hAP 2»C5lfI1-5o 
[0 0 10] AP^aEAQ-SlO (AP^tE^ia 

r2j ) tLT, ;*:SiES*p< s/-fe-v?2S:SmL-fc, 
T^-fe;^5K-<:^HAP 2fi. SfSLfcuf-i-^kSttfcchai 

lenge Text©fitSr^ Inl^tcgfg Lfclnitialization Vec 
tort, if^isb^oTV^SsfjISShared Secret Data^rSiC 
X = — KU, Strx6©7E<:OChallenge Text® 

rf^-CfcirfJ, JJc©TyV3i-«>3>'<^#iKfcA 
[00 11] r cT'cory ->^— Va auxSo 

a 9. ^til^MT 1 A^t)©, ry v'Ji-v'a 3/ 
v'tfico, S S I D (Service Set Identifier) SrS 
« mLfcTi?-fe;^;K'r:/HAP2;ii^ tfllESS I DlCT, 
^Sft^SrSasUL, ^*^*b3^fcTyv'3l-v'g v-ff-Bj- 
/v— /Hc^^^^, -twryi^ai— > 3 VS:ffpT-t-5d» if 5 

ry-^ai— ^a i^jgsroTy v'g >-f£;^;^ s/-fe— 

T/l'=''yXAH, RSA Data Security Inc. (ORG 4 

100 12] 0*0. c©^li:^a{cj:ttfi, r^-ir^ 
so JK-O-Hii^iji^ds, *)t>D«>. S?^<OKe y t?fc5Sh 
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ared Secret KeySrit*)-^ 5 w t "C. Ti^±:^^^:^i' 

ti:m.^i:m^LX^'>io ^WimmH. *Shared 

Secret Key Sr. -^3--- tf^S^t,. BI^®i^'kV^|lgJ^^ 

[0 0 131 

* j;x^®5tfit-efe»), r©«triitti oo%s^*-T?#5 

%/j:^^p«^y *&«A^ixTi/>5K e y #Sf^i«6S 
SSr^^oT^ s/ M7-^Jc, SAUip *> 

fc5MCP=ixfcSPBl (:^-7.f;^J^. ^S) rt-c. l7'i'-¥ 

(Oiffi^;6> f, COT y v-^- v- 3 V-Srff LT U± 5 "IlittiS 
[0 0 14] *|gBJtt. ^<oi.bf$.mMkz.&:h-Xtt^i\. 

[0 0 151 

»{c*jt,>T, HiiiH^iy Ti^co^ffii^ii^ ryv-a^— >3 

5»Wi^»c^tLTOggSE©fF^XttS§5Wfg^*5A;^$ 



6 

[0 0 161 :^^m<DTif'^:^^^>'vmw<r>mmiVm 

^5'-7^-X^tl^^i^:, MiSLANniyTF*1T'«lgC<7> 

•;/-fe— v^ilrMfE^iil^fcSm-rStfrJc, MfSLAN 
5 4 -eoft:te#*,l^ra =^gj:3t U fcS?iE# *> ^ S: ;^ 

[0 0 171 BulE^3;^T-:yr-Ctt. S5IE^ j/ h 

[0 0 181 Sfc, HirfS»3;^T-s/r-Cf±. f5l5-*-yh 

U^:B^^^:6*)/£^g«i: UXfi, HufEfglE^^Ji, IEEE 
40 8 0 2.1 1 5 Shared Key Authentication^ 

[0 0 19] 

^<DmMnwMK-^^^xumz.mm-r^. mifi. 
•tmxhi. 

[0 0 2 01 :^mM<DMWknTi'-t::^-!^-<iyVmm.\ 8 
tt. MfBia5(DT^'-fe:^zK'i'>'f«AP 2(c:E#^xT^ 
60 a $4x5, ■t-'^ct>*>. H^rlSlil5^;:ti^^T, fcS^i^eizI 
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[00 2 1] |2ll^ct^^^T. T^-fe;?.jK-i'>' hiS® 1 8 

»±, ^®:®^Sj^MT1. MT2. MT3, MT4i:<D 

iaa^si 2i:, «;iiam*!]!a#ife 1 2^rsi^$^^5^i 

n^^iSm<DT:^y'-ri 9 h^-if 7 t^M 

(O^m&m^ 1 7 J; 9 ■r-^' y >'^^ig6 MilSiift 

1 4 1 , mmmmnitm^m i 2 t 

1. MT2. MT3, MT 4ti^m^iX^m'^P^ -yt— 

v^sriissiimMs^® 1 2 t o-t^mtnim^i- 
i)mm/T y v^^i— >' 3 ^'^la*® 1 a t , a^ii/T y 

->3i-->3 ^-iaa^® 1 3:4^ BIEMaSrff 

t?. l7W'-yi':^ • 3iy T • ^s' M7— ^J' 1 S:Wai--53. 

la 1 6 t , mmm^m^^m 1 e »c j; •? s 

SE®5^^LT^^5^fb^(D#^E;5Sii^9l$i^fc«^;::. P-f^ 
[0 0 2 2] £iT. ±x6«J:5(-«^*tvfcT^-b:;^jK 

[0 0 2 3] tfrlEia 5 ICjBJt S^lb^MT 1 Sr. SfEift 

a^tr^M^CD^Sj^i: L. ^1&^MT2. MT3. M 
T4f±. ^l,ZTi^±:^:ii^>'hmmi 8i:Tyv'3^-v' 

Ty->3i-->3 >'^i^tJCJ;i5. T^-fe;^5K-r>'h 



<? 

[00 24] El 2 li, ESEf^BlWli^W^SE^IIScDSiJiail 
v'-'!r>';^4r^-fl2]-C*)5. ^tfj^MT 1 ;45, maSSA 
^©ffipf^tJ:!?. *-f. Shared Key Authentication^ 

[0 0 2 5] T^-fe;^jK-i'> hiSSl 8^C*J^^-C, 
amtoa^S 1 2 SrrJM^T, sz-t— :^SrSmL^ 
^n/r y v'o^— 3 >mmmwc i 3 a p^iE^ia 
1 (Ei2ro#-^2 o#ra) tLX. r®^iE#gg#<^s 

10 tw, •&EJ-^fe5r.i;6S-e#5> Initialization Vecto 
rtSecret Key<DfitS:>'-<7 t U WE P (WiredEq 
uivalent Privacy) P R N G- (Pseudorandom Number Ge 
nerator) <r>T;l^=f V :^J^\zm^1ScmmM^t:m\ 12 
8 0 c t e t ©— ;tJrft45Challenge TexttDfi^^M 

a*© 1 2 Sr;fh LT^Sb^MT 1 Jcj^ffi-S, 

[0 0 2 6] JSfeiC, MTS?II*!ia2 1 t UT. :^^liE;£; 
«^ s/-fe— ✓'I SrS«Lfc, ^IIj^MTltt. -tOftC 
^^tViChallenge TextWiCSr, WE'P©BS#'ft:T/V^=' 
20 y ;^Atc:t^l,>, Shared Secret Data t Initialization V 
ectori|r/-?7 —^\z. LTBt-^-fkSrtrVV ^•©{iSSrlniti 
alization Vectort^JC, ®!iES*P< sz-fe— 2 tc-^* 

•fe;^jK-<>'h^ai 8^r^o^^T, *li»iilfa*Q:a#S 1 2 
SrrfrUT. w<D;< s/-fe-v;4:SmLfc®IE/'7'y->'^— 
v'^ ^-tea^Sl 3tt. AP8gBE^0.a2 (|2|2roS^2 
2#^.) tLX. S{sLfcffff#^fc:$nfcChallenge Text 
WfttSr, I^^JwSfSLfcInitialization Vectort^* 
iqoTI/'> 5 Shared Secret DataSrStCx =3— K ^(O 
30 ^l&i:Sft5g(D7c©Challenge TextOfitSrik® -tixiS 
Ir)— T?fetKJ. AP^IE*aa3 (EI2<D##2 3#fiS) 
K)#«M**tT-t-^, rco^lIHiS::^bfc©:i5|114tc:^-t-7 
n— ©;^7':y7'S 3 0~;^xs/7°S 3 3<^>*aa-Cfe5. 
[0 0 2 7] 1214 ±|BT^-fe;^^'f' VhODSIEiaa 

fi. i/hgfil 8<Dfg|IE/Tyv'^-v'3 

V*&a#«il 3f±. ^IES*S^#|fcl 6(C*J-LT, ^ 

fE#*>-Cfe5r:i:S:ffl^aiL (;^X3/7'S3 0) . -t^xt 
40 -h$li- (;<:x:/7'S 3 1) . ^IIA;^3#*> (^x.y:?' 

S3 2) (D4^ffi{c:A5o -:l7. mmnhxh^^t(om 
!7— ^' ^1=ai-5:i-f-*ic^L.TS^x/<-f'^-^;^ f- 

[002 8] r :i -C. BSE/T y v'a^— v' 3 i'iaa^ioi 

fF^«)A;^J»ci5f?SEfFprA;^«a^$rSH-ix«, ^SE 
so fforSr^ Ufc^iEJEt;^;' y±—'y2 4r^«ftaft^aa^S 
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1 2Sr:ft-L-C^S!)^MT Itca^ffi-fS {y^'ryzfSZ 
3) . 

10 0 2 91 02 »wMoT. *SIU?;^> y-fe-i? 2 Sr 

[0030] rr-e, T^-fe;^sK-i':^h^ai 8iwi3i/\ 
T[±. ^j^iiff AQ;S#S 1 2Sr^bT, rro^s'-fe-v' 
SrSft Lfc^lE/r y v-a^-v' a lyUkM^St 1 3 tt. T 
yv^:— Va (ig 2 «?#•§• 2 4 #fiS) i UT, T 

y v-:i^— -ya VS^Ji^ -y-fe— v'tl'CDS S I D (Service 
Set Identifier) JwT. ^16,^MT 1 ?Jrf8ISlJ L. 

«>?>iT/;feTyv'3i— >'iTpr/w— -ewry 

-t-2)i:#(4, Mi^amMa^gl 2 5r^UTSSl^MT 
1 y -> 3 yfpBrS:^ Vii-T y ->3:.— a VJES 
«pt S'-fe-v'SriJfeft-t-S. r©Tyv'^-i^^i^^£:«F;»^ 

1 0 0 3 1 1 ^Jct;::. ^mmiAT i SIl#!K#f-*5i,^ 
LT. g»ie<3lC, ^iEdSJES$it5it^S:l213St;5|a4 

[0 0 3 2] 0 3(4. mmmi§/^^'< J^'T^ hm^(om 

T, ^Sl^MTDi^ «2SiSA^«i!jf^lCj: 9, Shared 
Key Authentication:i^feJc: J: 5SiE#i^^ SrM*&-f"5 

[0 0 3 3] T^-fe;^5K-f'i^H^®l 8^;l*3l,^T, iliU 

^aE/ryv-^i-v-g^ifiS^^l 3(4, AP|gfI*&S 

ft^JC^i65r.i:;J5-C#5. Initialization Vecto 
rtSecret Key<Dm.^y<y ^—^ t WE P (Wired E 
quivalent Privacy) PRNG (Pseudorandom Number G 
enerator) WT/l'='y XAtCi^V^iiaigSrtf V\ 12 
8 0 c t e t <7?— jgfC^SSChallenge Text(?5ffiSr^lll 

^m^^i 2^ift-\^x. ^mrnuT i iz^-r^c 

[0 0 3 4] MTmrniStM (lll3©#-^2 6# 

MT 1 (4. -t^tfJ-^^iXiChallenge Text(DfiSSr. WE 

PcDfft-i-'fbT/V.^y Xi>.^C^¥^,^, shared Secret Data 

Initialization Vectoi^y<7 ^ —^f [Zfl6-Witi:^i7 
V\ -tOfflSrInitialization Vectort^i:^, SEES* 
•y±-i?2l,Z-^ltXT^±:^ni^:^hmmi 8»Cjg{f 



iSilMftiS^S 1 2 Sr^ LT, ^ W;^ s/-fe-v?Srg{§ L 
^SfE/T y a V'MS^iS; 1 3 f4. A P ^11*0; 

32 (lll3(D#-§-2 7#fi8) t bTSmbfcBt-i-'fk^ix 
^Challenge Text<OffiSr. lil^JCgft Lfclnitializati 
on Vector tT-fe^o TV'S Shared Secret Data^rSiC 
•7*3— KU, -t^lfelfttttfM^TEcDChallenge Text(D^iS 
SrlttiJL, t?*)tufJAP|gliEMS3 ([g3<0 

#-g-2 8#fi?.) w#l®SrllfT-t-5. wW^IKSr^Ufcco 
10 dS|gl4Jc:^-t-7a— <D;^-r y^S 3 0~;^-r s/^S 3 
2, ;^-7's'7'S 3 4©*0!STfc5o 
[0 0 3 5] S-f. :lco#III^c:^J^^T^4. T^'-fe;^jK'i' 
V h SB 1 8 wMSE/T y -y^^- a y-^aa^MM i 3 

(4, SSEll***^® 1 6 iZM LTigfE#*)T?fc5 w 
Sril^pL (^^T'yT/sso) . -tixtl^^fc:. •ttitiD^ 

:/S3i) , ^lEA;^^^ (>^xs/:/S 3 2) (D'Ji^m\z 

**^#®16(4, m.<'\z, ^s/ M7— 

[0 0 3 6] KaE/ryi^^i-v/H v^a-a^na 

1 3f4, mKnh^'f-^i:^^'<J>.T'!f Ki-5«&mfSIEA 

ffi5cDA;t»t::J:5BiEii5A;^©ii^SrS»ttttf. SIE 
Jg^Sr^UfeSBEJES^pt 'yfe-v»2SrMi»am«iS#S 

1 2Sr^L.T^ib^MTl(wi^m-rS (;^x-;/rS3 
4) o lll«(C. ^!iEA;^#t> (;^7"->'7'S 3 2) 

i2i::fr\^xi»w>mMTi\zms-ri> c^t^s'T'ss 

4) o 

[0 0 3 7] 0 3ICMO-C, *SiEJE£;^;X •;/ir--:^2Sr 
SmUfcS»l«MT 1 f4, ^Oii$**sig5-Cfc5wi:*> 

P>i!>:(^Tyv-3i-v'3 v©#M{-(4Ati--fx 

(4. ^— !f(c:>ftLT^fE:iS^U:L.f:i:ii:S:a^-r5 (El 

3 2 9 #fi?,) o ioT. ^<D^f4. ^ttl^MT 

1 14, x-^'iiftiSrfT 5 :i i ;is-C#;iv\ 

[0 0 3 8] /£ib\ r.r-r*-l-SbTV'>-5, WEPWT-'V 
40 =fyXA(4. R S A Data Securitylnc. (7)R C 4S^S(C 
J:!JS!£$tuT*5t), Ty->:3^— >3 vtoa (0 
2©#*2 4#fi9) IEEE8 0 2. 1 1-^3^3^$ 

[0 0 3 9] ^tc. zzx(Dmmn^^-(-7\zm^^ti 
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[0 0 4 0] ^J.±.m^1ti:o\:i. :^mM<r>mm.-Q\t. T 

^IE<^)?F^Xf4Jg§?^Jg^i-5iSiiEA;^#S 1 5 i: Srii 

tSriSi«)JifT*3-f, -trots' h!7-:^*Wa-t- -5^- 

10 04 1] *fc, r.®ISIiEOD#Jl|Mf*, IEEE 8 0 
2. lit?. :^7'v^3 Vi: LTj^^$HTV^-5. Shared 
Key Authentication#)lS^|IS L-TI/^SlJ'-ri'l^^L 

[0 0 4 2] 
5. 

[|2IScollB^^it|£|^] 



«tli&«j*Sr*i-|l|-Cife5. 

112131 *iiiSOTjgfli©7'^-fe^/K'r>'h^s<oigfim 
t-|2i-e*>s, 

[04] 3^:^iS©JKfliODT^'-fe::^j}^-f V hSaror^'-fe 
[05] eS3fecO!7')'-YU';^LAN->;^-7'i^<Z)tEBS«Jlfe4' 
[BI6] tS5;EO'7^-^U-;^LANv';^xA(D^|E#||Mt 

[??-i-®tfteg] 
^asMT 1 

^l&^MT 2 
^Kl^MT 3 

^nmAT 4 



3 
4 
5 
6 
7 

1 2 
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